iEmoji Feeds @Md Ismail Šojal (0x0SojalSec)
1.
Md Ismail Šojal
@0x0SojalSec
Cookies Base local file read vulnerability (wherever you see usid or similar).
#infosecurity… twitter.com/i/web/status/1…
#infosecurity… twitter.com/i/web/status/1…
2.
Md Ismail Sojal
@0x0SojalSec
Here is a SSTI payload to read arbitray files on a flask server:️
{{config.items()[4][1].__class__.mro__[2].__s… twitter.com/i/web/status/1…
{{config.items()[4][1].__class__.mro__[2].__s… twitter.com/i/web/status/1…
3.
![0x0SojalSec]( "0x0SojalSec: Twitter")
4.
![0x0SojalSec]( "0x0SojalSec: Twitter")
5.
![0x0SojalSec]( "0x0SojalSec: Twitter")
Md Ismail Sojal
@0x0SojalSec
Look for ssrf in : via @vickieli7
- webhooks
- file upload via URL,
- document and image processors,
- link ex… twitter.com/i/web/status/1…
- webhooks
- file upload via URL,
- document and image processors,
- link ex… twitter.com/i/web/status/1…
Md Ismail Sojal
@0x0SojalSec
Some different ways of encoding bypasses in ssrf:
Hex Encoding
127.0.0.1 translates to 0x7f.0x0.0x0.0x1
Octal… twitter.com/i/web/status/1…
Hex Encoding
127.0.0.1 translates to 0x7f.0x0.0x0.0x1
Octal… twitter.com/i/web/status/1…
Md Ismail Sojal
@0x0SojalSec
Updated Subdomain Enumeration Guide with techniques, fixes, etc. : by @sidxparab
Have a look
Boost your Recon… twitter.com/i/web/status/1…
Have a look
Boost your Recon… twitter.com/i/web/status/1…
...but wait! There's more!
1.
fakhright
@fakhright
astaghfirullah peng.krim guaaaaaaaa..............a *salto sambil solat*
2.
ReganBrittany
@ReganBrittany
Nanana diva is the female version of the hustlaaaa! #gettinmoney
3.
Rickygonz1215
@Rickygonz1215
If I weighed 182 I'd be cut
